Malicious Content Scanner Version Signature for Data Backup
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data management systems face challenges in effectively preventing the spread of computer viruses while minimizing user encumbrance and storage overload, as they often require frequent scanning of files for malicious content and maintain redundant backups.
Innovation Solution
A method that integrates virus prevention techniques with data backup by scanning files for malicious content upon writing to storage, storing a read-only virus-free version with a signature of the scanner version used, and periodically deleting older backups to maintain frequent virus-free backups without overtaxing the system, allowing for efficient retrieval of uninfected versions if needed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If files are scanned for malicious content every time they are written to storage, then virus prevention reliability is improved, but system productivity deteriorates due to frequent scanning operations
Solution Approach 1:
The system performs malicious content scanning as a preliminary action when files are initially written to storage, creating a virus-free backup version before normal operations proceed. This preliminary scanning ensures that clean versions are available for future restoration without requiring continuous scanning of all file operations.
Solution Approach 2:
The system creates copy versions of files that are marked as virus-free through preliminary scanning. These copied versions are stored separately and can be retrieved when infections are detected, avoiding the need to scan every file operation while maintaining reliable virus protection through the availability of known-clean copies.
2Reliability
If multiple backup versions of files are maintained, then reliability of virus-free restoration is improved, but storage volume increases due to redundant backups
Solution Approach 1:
The system applies different quality characteristics to different backup versions by marking them with metadata indicating their virus-free status and scanner version compatibility. This allows the system to selectively retrieve and use only the locally appropriate virus-free versions rather than maintaining all possible versions with equal status.
Solution Approach 2:
The system discards backup versions that are determined to be infected or incompatible with current scanner versions, while recovering and utilizing only the virus-free versions that meet current security requirements. This selective retention reduces storage volume while maintaining restoration reliability.
3Measurement precision
If outdated scanner versions are used to scan retrieved files, then measurement precision of malicious content detection deteriorates, but loss of time occurs when re-scanning is required
Solution Approach 1:
The system incorporates feedback mechanisms that track scanner versions used during initial scanning and compare them against current scanner versions. This feedback allows the system to identify when re-scanning is necessary and to retrieve appropriate virus-free versions without unnecessary time loss from redundant scanning operations.
Solution Approach 2:
The system dynamically adjusts its scanning strategy based on the compatibility between stored scanner versions and current security threats. When scanner versions are outdated, the system dynamically retrieves dynamically identified virus-free versions marked with compatible scanner version information, optimizing both detection precision and time efficiency.
Data Source
AI summary
In a data management system, examination of first data for malicious content by a malicious content scanner is initiated in response to a request to write first data to a data storage device. In response to the examination revealing no malicious content in the first data, the first data, a first signature representative of a version of the malicious content scanner at a time of the examination of the first data, and second data linking the first signature to the first data as read-only data are written to the data storage device.